Bad Actors Getting Your Health Data Is the FBI’s Latest Worry
In February 2015, the health insurer Anthem revealed that criminal hackers had gained access to the company's servers, exposing the personal information of nearly 79 million patients. It's the largest known healthcare breach in history.
FBI agents worry that the vast amounts of healthcare data being generated for precision medicine efforts could leave the U.S. vulnerable to cyber and biological attacks.
That year, the data of millions more would be compromised in one cyberattack after another on American insurers and other healthcare organizations. In fact, for the past several years, the number of reported data breaches has increased each year, from 199 in 2010 to 344 in 2017, according to a September 2018 analysis in the Journal of the American Medical Association.
The FBI's Edward You sees this as a worrying trend. He says hackers aren't just interested in your social security or credit card number. They're increasingly interested in stealing your medical information. Hackers can currently use this information to make fake identities, file fraudulent insurance claims, and order and sell expensive drugs and medical equipment. But beyond that, a new kind of cybersecurity threat is around the corner.
Mr. You and others worry that the vast amounts of healthcare data being generated for precision medicine efforts could leave the U.S. vulnerable to cyber and biological attacks. In the wrong hands, this data could be used to exploit or extort an individual, discriminate against certain groups of people, make targeted bioweapons, or give another country an economic advantage.
Precision medicine, of course, is the idea that medical treatments can be tailored to individuals based on their genetics, environment, lifestyle or other traits. But to do that requires collecting and analyzing huge quantities of health data from diverse populations. One research effort, called All of Us, launched by the U.S. National Institutes of Health last year, aims to collect genomic and other healthcare data from one million participants with the goal of advancing personalized medical care.
Other initiatives are underway by academic institutions and healthcare organizations. Electronic medical records, genetic tests, wearable health trackers, mobile apps, and social media are all sources of valuable healthcare data that a bad actor could potentially use to learn more about an individual or group of people.
"When you aggregate all of that data together, that becomes a very powerful profile of who you are," Mr. You says.
A supervisory special agent in the biological countermeasures unit within the FBI's weapons of mass destruction directorate, it's Mr. You's job to imagine worst-case bioterror scenarios and figure out how to prevent and prepare for them.
That used to mean focusing on threats like anthrax, Ebola, and smallpox—pathogens that could be used to intentionally infect people—"basically the dangerous bugs," as he puts it. In recent years, advances in gene editing and synthetic biology have given rise to fears that rogue, or even well-intentioned, scientists could create a virulent virus that's intentionally, or unintentionally, released outside the lab.
"If a foreign source, especially a criminal one, has your biological information, then they might have some particular insights into what your future medical needs might be and exploit that."
While Mr. You is still tracking those threats, he's been traveling around the country talking to scientists, lawyers, software engineers, cyber security professionals, government officials and CEOs about new security threats—those posed by genetic and other biological data.
Emerging threats
Mr. You says one possible situation he can imagine is the potential for nefarious actors to use an individual's sensitive medical information to extort or blackmail that person.
"If a foreign source, especially a criminal one, has your biological information, then they might have some particular insights into what your future medical needs might be and exploit that," he says. For instance, "what happens if you have a singular medical condition and an outside entity says they have a treatment for your condition?" You could get talked into paying a huge sum of money for a treatment that ends up being bogus.
Or what if hackers got a hold of a politician or high-profile CEO's health records? Say that person had a disease-causing genetic mutation that could affect their ability to carry out their job in the future and hackers threatened to expose that information. These scenarios may seem far-fetched, but Mr. You thinks they're becoming increasingly plausible.
On a wider scale, Kavita Berger, a scientist at Gryphon Scientific, a Washington, D.C.-area life sciences consulting firm, worries that data from different populations could be used to discriminate against certain groups of people, like minorities and immigrants.
For instance, the advocacy group Human Rights Watch in 2017 flagged a concerning trend in China's Xinjiang territory, a region with a history of government repression. Police there had purchased 12 DNA sequencers and were collecting and cataloging DNA samples from people to build a national database.
"The concern is that this particular province has a huge population of the Muslim minority in China," Ms. Berger says. "Now they have a really huge database of genetic sequences. You have to ask, why does a police station need 12 next-generation sequencers?"
Also alarming is the potential that large amounts of data from different groups of people could lead to customized bioweapons if that data ends up in the wrong hands.
Eleonore Pauwels, a research fellow on emerging cybertechnologies at United Nations University's Centre for Policy Research, says new insights gained from genomic and other data will give scientists a better understanding of how diseases occur and why certain people are more susceptible to certain diseases.
"As you get more and more knowledge about the genomic picture and how the microbiome and the immune system of different populations function, you could get a much deeper understanding about how you could target different populations for treatment but also how you could eventually target them with different forms of bioagents," Ms. Pauwels says.
Economic competitiveness
Another reason hackers might want to gain access to large genomic and other healthcare datasets is to give their country a leg up economically. Many large cyber-attacks on U.S. healthcare organizations have been tied to Chinese hacking groups.
"This is a biological space race and we just haven't woken up to the fact that we're in this race."
"It's becoming clear that China is increasingly interested in getting access to massive data sets that come from different countries," Ms. Pauwels says.
A year after U.S. President Barack Obama conceived of the Precision Medicine Initiative in 2015—later renamed All of Us—China followed suit, announcing the launch of a 15-year, $9 billion precision health effort aimed at turning China into a global leader in genomics.
Chinese genomics companies, too, are expanding their reach outside of Asia. One company, WuXi NextCODE, which has offices in Shanghai, Reykjavik, and Cambridge, Massachusetts, has built an extensive library of genomes from the U.S., China and Iceland, and is now setting its sights on Ireland.
Another Chinese company, BGI, has partnered with Children's Hospital of Philadelphia and Sinai Health System in Toronto, and also formed a collaboration with the Smithsonian Institute to sequence all species on the planet. BGI has built its own advanced genomic sequencing machines to compete with U.S.-based Illumina.
Mr. You says having access to all this data could lead to major breakthroughs in healthcare, such as new blockbuster drugs. "Whoever has the largest, most diverse dataset is truly going to win the day and come up with something very profitable," he says.
Some direct-to-consumer genetic testing companies with offices in the U.S., like Dante Labs, also use BGI to process customers' DNA.
Experts worry that China could race ahead the U.S. in precision medicine because of Chinese laws governing data sharing. Currently, China prohibits the exportation of genetic data without explicit permission from the government. Mr. You says this creates an asymmetry in data sharing between the U.S. and China.
"This is a biological space race and we just haven't woken up to the fact that we're in this race," he said in January at an American Society for Microbiology conference in Washington, D.C. "We don't have access to their data. There is absolutely no reciprocity."
Protecting your data
While Mr. You has been stressing the importance of data security to anyone who will listen, the National Academies of Sciences, Engineering, and Medicine, which makes scientific and policy recommendations on issues of national importance, has commissioned a study on "safeguarding the bioeconomy."
In the meantime, Ms. Berger says organizations that deal with people's health data should assess their security risks and identify potential vulnerabilities in their systems.
As for what individuals can do to protect themselves, she urges people to think about the different ways they're sharing healthcare data—such as via mobile health apps and wearables.
"Ask yourself, what's the benefit of sharing this? What are the potential consequences of sharing this?" she says.
Mr. You also cautions people to think twice before taking consumer DNA tests. They may seem harmless, he says, but at the end of the day, most people don't know where their genetic information is going. "If your genetic sequence is taken, once it's gone, it's gone. There's nothing you can do about it."
The Toxic Effects of Noise and What We’re Not Doing About It
Erica Walker had a studio in her Brookline, Mass. apartment where she worked as a bookbinder and furniture maker. That was until a family with two rowdy children moved in above her.
The kids ran amuck, disrupting her sleep and work. Ear plugs weren’t enough to blot out the commotion. Aside from anger and a sense of lost control, the noise increased her heart rate and made her stomach feel like it was dropping, she says.
That’s when Walker realized that noise is a public health problem, not merely an annoyance. She set up her own “mini study” on how the clamor was affecting her. She monitored sound levels in her apartment and sent saliva samples to a lab to measure her stress levels.
Walker ultimately sold her craft equipment and returned to school to study public health. Today she is assistant professor of epidemiology and director of the Community Noise Lab at the Brown University School of Public Health. “We treat noise like a first world problem—like a sacrifice we should have to make for modern conveniences. But it’s a serious environmental stressor,” she asserts.
Our daily soundscape is a cacophony of earsplitting jets, motorcycles, crying babies, construction sites or gunshots if you’re in the military. Noise exposure is the primary cause of preventable hearing loss. Researchers have identified links between excessive noise and a heightened risk of heart disease, metabolic disorders, anxiety, depression, sleep disorders, and impaired cognition. Even wildlife suffers. Blasting oil drills and loud shipping vessels impede the breeding, feeding and migration of whales and dolphins.
At one time, the federal government had our back… and our ears. Congress passed the Noise Control Act in 1972. The Environmental Protection Agency set up the Office of Noise Abatement and Control (ONAC) to launch research, explore solutions and establish noise emission standards. But ONAC was defunded in 1981 amidst a swirl of antiregulatory sentiment.
Impossibly Loud and Unhealthy
Daniel Fink. a physician, WHO consultant, and board chair of The Quiet Coalition, a program of the nonprofit Quiet Communities, likens the effect of noise to the invisible but cumulative harm of second-hand smoke. About 1 in 4 adults in the U.S. who report excellent to good hearing already have some hearing loss. The injury can happen after one loud concert or from years with a blaring TV. Some people are more genetically susceptible to noise-related hearing loss than others.
“People say noise isn’t a big deal but it bothers your body whether you realize it or not,” says Ted Rueter, director of Noise Free America: A Coalition to Promote Quiet. Noise can chip away at your ears or cardiovascular system even while you’re sleeping. Rueter became a “quiet advocate” while a professor at UCLA two decades ago. He was plagued by headaches, fatigue and sleep deprivation caused by the hubbub of Los Angeles, he says.
The louder a sound is, and the longer you are exposed to it, the more likely it will cause nerve damage and harmful fluid buildup in your inner ear. Normal speech is 50-60 decibels (dBs). The EPA recommends that 24-hour exposure to noise should be no higher than 70 weighted decibels over 24 hours (weighted to approximate how the human ear perceives the sound) to prevent hearing loss but a 55 dB limit is recommended to protect against other harms from noise, too.
The decibel scale is logarithmic. That means 80 dB is 10 times louder than 70 dB. Trucks and motorcycles run 90 dBs. A gas-powered leaf blower, jackhammer or snow blower will cost you 100 dBs. A rock concert is in the 110 dB range. Aircraft takeoffs or sirens? 120 dBs.
Walker, the Brown professor, says that sound measurements often use misleading metrics, though, because they don’t include low frequency sound that disturb the body. The high frequency of a screeching bus will register in decibels but the sound that makes your chest reverberate is not accounted for, she explains. ‘How loud?’ is a superficial take when it comes to noise, Walker says.
After realizing the impact of noise on her own health, Erica Walker was inspired to change careers and become director of the Community Noise Lab at the Brown University School of Public Health.
Erica Walker
Fink adds that the extent to which noise impairs hearing is underestimated. People assume hearing loss is due to age but it’s not inevitable, he says. He cites studies of older people living in quiet, isolated areas who maintain excellent hearing. Just like you can prevent wrinkles by using sunscreen, you can preserve hearing by using ear plugs when attending fireworks or hockey games.
You can enable push notifications on a Smart Watch to alert you at a bar exceeding healthy sound levels. Free apps like SoundPrint, iHEARu, or NoiseTube can do decibel checks, too, but you don’t need one, says Fink. “If you can’t carry a conversation at normal volume, it’s too loud and your auditory health is at risk,” he says.
About 40 million U.S. adults, ages 20-69, have noise-induced hearing loss. Fink is among them after experiencing tinnitus (ringing or buzzing in the ears) on leaving a raucous New Year’s Eve party in 2007. The condition is permanent and he wears earplugs now for protection.
Fewer are aware of the link between noise pollution and heart disease. Piercing noise is stressful, raising blood pressure and heart rate. If you live near a freeway or constantly barking dog, the chronic sound stress can trigger systemic inflammation and the vascular changes associated with heart attacks and stroke.
Researchers at Rutgers University’s Robert Wood Johnson Medical School, working with data from the state’s Bureau of Transportation, determined that 1 in 20 heart attacks in New Jersey during 2018 were due to noise from highways, trains and air traffic. That’s 800 heart attack hospitalizations in the state that year.
Another study showed that incidence of hypertension and hardening arteries decreased during the Covid-19 air lockdown among Poles in Krakow routinely exposed to aircraft noise. The authors, comparing their pre-pandemic 2015 results to 2020 data, concluded it was no coincidence.
Mental health takes a hit, too. Chronic noise can provoke anxiety, depression and violence. Cognitively, there is ample evidence that noise disturbance lowers student achievement and worker productivity, and hearing loss among older people can speed up cognitive decline.
Noise also contributes to health disparities. People in neighborhoods with low socioeconomic status and a higher percentage of minority residents bear the brunt of noise. Affluent people have the means to live far from airports, factories, and honking traffic.
Out, Out, Damn Noise
Europe is ahead of the U.S. in tackling noise pollution. The World Health Organization developed policy guidelines used by the European Environment Agency to establish noise regulations and standards, and progress reports are issued.
Americans are relying too much on personal protective equipment (PPE) instead of eliminating or controlling noise. The Centers of Disease Control and Prevention rank PPE as the least useful response. Earplugs and muffs are effective, says Walker, but these devices are “a band-aid on a waterfall.”
Editing out noise during product design is the goal. Engineers have an arsenal of techniques and know-how for that. The problem is that these solutions aren’t being applied.
A better way to lower the volume is by maintaining or substituting equipment intended for common use. Piercing building alarms can be replaced with visual signals that flash alerts. Clanking chain and gear drives can be swapped out with belt drives. Acoustical barriers can wall off highway noise. Hospitals can soften beeping monitors and limit loudspeaker blasts. Double paned windows preserve quiet.
Editing out noise during product design is the goal. Engineers have an arsenal of techniques and know-how for that. The problem is that these solutions aren’t being applied, says Jim Thompson, an engineer and editor of the Noise Control Engineering Journal, published by the Institute of Noise Control Engineering of the USA
Engineers have materials to insulate, absorb, reflect, block, seal or diffuse noise. Building walls can be padded. Metal gears and parts can be replaced with plastic. Clattering equipment wheels can be rubberized. In recent years, building certifications such as LEED have put more emphasis on designs that minimize harmful noise.
Walker faults urban planners, too. A city’s narrow streets and taller buildings create a canyon effect which intensifies noise. City planners could use bypasses, rerouting, and other infrastructure strategies to pump down traffic volume. Sound-absorbing asphalt pavement exists, too.
Some municipalities are taking innovative measures on their own. Noise cameras have been installed in Knoxville, Miami and New York City this year and six California cities will join suit next year. If your muffler or audio system registers 86 dB or higher, you may receive a warning, fine or citation, similar to how a red-light camera works. Rueter predicts these cameras will become commonplace.
Based on understanding how metabolic processes affect noise-induced hearing loss in animal models, scientists are exploring whether pharmacological interventions might work to inhibit cellular damage or improve cellular defenses against noise.
Washington, DC, and the University of Southern California have banned gas-powered leaf blowers in lieu of quieter battery-powered models to reduce both noise and air pollution. California will be the first state to ban the sale of gas-powered lawn equipment starting 2024.
New York state legislators enacted the SLEEP (Stop Loud and Excessive Exhaust Pollution) Act in 2021. This measure increases enforcement and fines against motorists and repair shops that illegally modify mufflers and exhaust systems for effect.
“A lot more basic science and application research is needed [to control noise],” says Thompson, noting that funding for this largely dried up after the 1970s. Based on understanding how metabolic processes affect noise-induced hearing loss in animal models, scientists are exploring whether pharmacological interventions might work to inhibit cellular damage or improve cellular defenses against noise.
Studying biochemical or known genetic markers for noise risk could lead to other methods for preventing hearing loss. This would offer an opportunity to identify people with significant risk so those more susceptible to hearing loss could start taking precautions to avoid noise or protect their ears in childhood.
These efforts could become more pressing in the near future, with the anticipated onslaught of drones, rising needs for air conditioners, and urban sprawl boding poorly for the soundscape. This, as deforestation destroys natural carbon absorption reservoirs and removes sound-buffering trees.
“Local and state governments don’t have a plan to deal with [noise] now or in the future,” says Walker. “We need to think about this with intentionality.”
A new way to help kids with ADHD: Treat adult ADHD
When a child is diagnosed with attention deficit hyperactivity disorder (ADHD), it can often be a surprise to the parents that one of them has ADHD as well. They may have experienced some of the symptoms but never had the condition diagnosed.
Physicians, however, are usually less surprised because they know that ADHD is a very heritable disorder. According to a 2015 study, if a parent has ADHD, the child has up to a 57 percent chance of having it, and the child’s risk is 32 percent if their sibling has it.
“There have been 20 to 30 twin studies that show that the heritability of ADHD is about 70 percent,” meaning that both twins have it, says Stephen Faraone, distinguished professor and vice chair for research at SUNY Upstate Medical University. “It is as heritable as schizophrenia, bipolar disorder, autism or other psychiatric disorders that people tend to think are more biological than ADHD for some reason.”
More attention needed for adult ADHD
Brad McAlister, CMSE, executive director of the American Professional Society of ADHD & Related Disorders, or APSARD, explains that the consequences of untreated ADHD in adults are very well documented. The prevalence of ADHD in U.S. adults is 4.4 percent or about 11 million people.
Many adults go undiagnosed for decades or are misdiagnosed by providers. McAlister says that 75 percent are not receiving treatment. “The U.S. economic burden of adult ADHD is $105 to $194 billion annually,” he says. “The negative consequences on peoples’ lives include higher risks of dropping out of school, losing jobs, financial debt, divorce, fractured relationships, substance use disorders, and co-occurring depression/anxiety.”
One of the negative impacts of undiagnosed ADHD in adults is the effect that it can have on their children who have ADHD.
Adult ADHD is currently treated by a broad range of health care providers with different educational backgrounds and in different practice settings. In August, APSARD published the first U.S. guidelines for adult ADHD. “The creation of guidelines for ADHD in adults will allow all practitioners to benefit from the best evidence about diagnosing and treating the disorder,” McAlister says.
Faraone explains that the guidelines are intended to help practitioners understand the best practices for adults with ADHD, including screening and other ways of evaluating whether someone has it. He recently completed a study of what he calls the Metrics of Quality Care for adults with ADHD.
“We looked at a sizable group of primary care practices in the U.S., and we learned that although quality care for adults with ADHD has been gradually improving over the past decade, there are many areas where it is still far behind where it needs to be,” he says. “That’s consistent with other studies that show that in primary care for adults, ADHD is not treated nearly as well as it is treated in specialty and psychiatry care.”
How kids with ADHD are affected
One of the negative impacts of undiagnosed ADHD in adults is the effect that it can have on their children who have ADHD because their ability to care for that child’s special needs may be impaired.
“The treatments that are most effective in treating children with ADHD are medication and behavioral interventions as their reward bait, and at home, it’s the parent that administers them,” says Mark A. Stein, director of the ADHD and Related Disorders Program at Seattle Children’s Hospital. “Adults with ADHD have difficulties with time management and organization skills, so they will have a hard time making sure their child is ready for school, has breakfast, has their medications, etcetera.”
Even more challenging than getting a prescription, Stein adds, is finding a psychologist or therapist who is skilled in evaluating and working with children with ADHD and their parents. If left undiagnosed and untreated, adult ADHD may also interfere with getting a good evaluation for the child.
“If you have ADHD and your mind is wandering and you don’t have all of the forms from the school for your provider, and you’re focused on the bad day you’re having rather than giving a history of your child, all of that is going to delay getting an effective treatment for your child,” Stein says. “So that’s why it’s important to identify ADHD in parents.”
Promising research and training
After delays due to the pandemic, Stein and his colleague Andrea Chronis-Tuscano, professor and director of the Maryland ADHD Program at the University of Maryland, are now about two years into what they anticipate will be a six-year study that involves treating parents who have children with untreated ADHD symptoms. The goal is to see whether treating the parent first with medication and training, or just the training, helps the child’s symptoms due to improved parenting. They are also studying whether they can postpone the need for medication until children are older, when it’s more effective.
“Pediatricians are more aware of ADHD in parents because of our study,” Stein says. “They’re also more aware of the shortcomings in our healthcare delivery system in terms of how hard it is to find providers who are comfortable treating adult ADHD.”
“Besides depression, ADHD is the other disorder that parents have that really impacts kids significantly," Stein says. “With treatment, many people with ADHD do very well."
That said, he’s seen a significant improvement in the past decade with increased recognition of ADHD in adults. “It started with pediatricians recognizing that post-partum depression impacted the mother’s ability to care for her children and making it routine to screen for depression in parents of kids,” he says. “Besides depression, ADHD is the other disorder that parents have that really impacts kids significantly, so it’s important for them to be aware of characteristics of [ADHD in] parents and have resources they can give parents to help them.”
Stein emphasizes that even if someone displays symptoms of ADHD, that does not mean that they have it. They should seek a physician’s evaluation to confirm a diagnosis, which would enable them to get the medication and behavioral treatment they need.
The medication can take effect in parents within an hour. Meanwhile, when parents participate in the behavioral parent training courses, their kids with ADHD start showing significant improvement within about four to five weeks, according to Stein.
“With treatment, many people with ADHD do very well,” he says. “Especially if they get through formal schooling, find the right fit with their job, and if they make the right choices with their relationships, those three things can go a long way to make their ADHD fade into the background.”